Dropped Files | ZeroBOX

Name	85666a562ee0be5c_8555326cc9661c9937dc5053b6c38763 Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8555326CC9661C9937DC5053B6C38763
Size	1.5KB
Processes	3052 (wscript.exe)
Type	data
MD5	`866912c070f1ecacacc2d5bca55ba129`
SHA1	`b7ab3308d1ea4477ba1480125a6fbda936490cbb`
SHA256	`85666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b69`
CRC32	`B359B735`
ssdeep	`24:KoBiSmoBlFuztNXbAn29DdtKLrGFsRTN0d9A41vW/Xa3u47pOIjZj3qk66t6:TiSXax1bAnuKLSOpN0d+41O/8fpOI12R`
Yara	None matched
VirusTotal	Search for analysis

Name	e5cea85d6f6b9bc4_8555326cc9661c9937dc5053b6c38763 Submit file
Filepath	C:\Users\test22\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8555326CC9661C9937DC5053B6C38763
Size	326.0B
Processes	3052 (wscript.exe)
Type	data
MD5	`c82b941547724cd924b90517c4d17ca4`
SHA1	`2e20bb6f320612996778e2b0c9e72f30795e48d7`
SHA256	`e5cea85d6f6b9bc4e044f79093ed1ed9002d9098989ca8d8ab8b635039bd7e46`
CRC32	`A6ECB500`
ssdeep	`6:kK+sqvNyZu6FAagIZqID2yUKlVlRQl8V1:kks6FHZqIDVUClRQGV1`
Yara	None matched
VirusTotal	Search for analysis

Name	a9b1dc8eaa5fcd00_d93f411851d7c929.customdestinations-ms Submit file
Filepath	c:\users\test22\appdata\roaming\microsoft\windows\recent\customdestinations\d93f411851d7c929.customdestinations-ms
Size	7.8KB
Processes	2772 (powershell.exe)
Type	data
MD5	`c1d8708bab1e838a2deda26d58bb8d42`
SHA1	`95d39e75a804752961c139bb6c0b67f84f685035`
SHA256	`a9b1dc8eaa5fcd0034694cf9742ae915a5932142a1477c3ab6fada45d98750b2`
CRC32	`E71AF2A2`
ssdeep	`96:QtuC6GCPDXBqvsqvJCwoFtuC6GCPDXBqvsEHyqvJCworFS7HwxWlUVul:QtbXoFtbbHnor/xo`
Yara	Antivirus - Contains references to security software Generic_Malware_Zero - Generic Malware
VirusTotal	Search for analysis